Controlling container image operations in computer environment

Abstract

A method, computer program product, and computer system for building container images comprise a base container image control agent associated with a base container image and a build system control agent associated with a build system. A mutual negotiation protocol is facilitated between the base container image control agent and the build system control agent. A set of operation parameters is determined in response to facilitating the mutual negotiation protocol. Identified from the set of operation parameters a set of requirements for a new container image control agent. A new container image is generated based on the operation parameters to which the new container image control agent is associated.

What is claimed is: 
     
         1 . A computer-implemented method for building container images, the computer-implemented method comprising:
 determining, by one or more processors of a computer system, a base container image control agent associated with a base container image;   determining, by one or more processors of a computer system, a build system control agent associated with a build system;   facilitating, by the one or more processors of the computer system, a mutual negotiation protocol between the base container image control agent and the build system control agent;   determining, by the one or more processors of the computer system, a set of operation parameters in response to facilitating the mutual negotiation protocol;   identifying, by the one or more processors of the computer system, from the set of operation parameters a set of requirements for a new container image control agent; and   generating a new container image based on the operation parameters to which the new container image control agent is associated.   
     
     
         2 . The computer-implemented method of  claim 1 , further comprising:
 detecting, by the one or more processors of the computer system, an event; and   identifying the build system control agent associated with an originator of the event.   
     
     
         3 . The computer-implemented method of  claim 1 , wherein the base container image control agent controls an instantiation of at least one of a reuse, derivation or evolution lifecycle of the base container image with respect to the new container image. 
     
     
         4 . The computer-implemented method of  claim 1 , further comprising:
 creating, by the base container image control agent, a data encryption key to encrypt one or more layers of the base container image.   
     
     
         5 . The computer-implemented method of  claim 1 , further comprising:
 forming a smart contract by an owner of the base container image control agent and an owner of the build system control agent to which the base container image control agent and the build system control agent are associated, wherein the smart contract defines negotiation goals, requirements, and constraints for the mutual negotiation protocol.   
     
     
         6 . The computer-implemented method of  claim 1 , wherein facilitating the mutual negotiation protocol comprises:
 requesting, by the build system control agent, a build file;   comparing the build file against an allow list;   determining, in response to the comparison, an agreement between the build system control agent and the base container image control agent; and   performing, by the build system, a build operation including retrieving the new container image for association with the new container image control agent.   
     
     
         7 . The computer-implemented method of  claim 6 , further comprising:
 storing, by the build system control agent or the base container image control agent, evidence of the build operation in a blockchain.   
     
     
         8 . The computer program product method of  claim 6 , further comprising:
 storing, by the build system control agent or the base container image control agent, evidence of the build operation and negotiation in a storage device associated with the build system control agent or the base container image control agent.   
     
     
         9 . A computer program product, comprising one or more computer readable hardware storage devices having computer readable program code stored therein, said program code containing instructions executable by one or more processors of a computer system to implement a method for building container images, said method comprising the steps of:
 determining, by one or more processors of a computer system, a first base image control agent associated with a first container image;   invoking, by the one or more processors of the computer system, a first build system control agent, to generate a second container image from the first container image;   facilitating, by the one or more processors of the computer system, a mutual negotiation protocol between the first base image control agent and the first build system control agent;   determining, by the one or more processors of the computer system, a set of operation parameters in response to facilitating the mutual negotiation protocol;   identifying, by the one or more processors of the computer system, from the set of operation parameters a set of requirements for at least one third controller agent;   creating, by the one or more processors of the computer system, a second base image control agent for the second container image using the set of requirements; and   executing, by the one or more processors of the computer system, the second container image controlled by the second base image control agent.   
     
     
         10 . The computer program product of  claim 9 , wherein the method further comprises:
 detecting, by the one or more processors of the computer system, an event; and   identifying the build system control agent associated with an originator of the event.   
     
     
         11 . The computer program product of  claim 9 , wherein the base container image control agent controls an instantiation of at least one of a reuse, derivation or evolution lifecycle of the base container image with respect to the new container image. 
     
     
         12 . The computer program product of  claim 9 , wherein the method further comprises:
 creating, by the base container image control agent, a data encryption key to encrypt one or more layers of the base container image.   
     
     
         13 . The computer program product of  claim 9 , wherein the method further comprises:
 forming a smart contract by an owner of the base container image control agent and an owner of the build system control agent to which the base container image control agent and the build system control agent are associated, wherein the smart contract defines negotiation goals, requirements, and constraints for the mutual negotiation protocol.   
     
     
         14 . The computer program product of  claim 9 , wherein facilitating the mutual negotiation protocol comprises:
 requesting, by the build system control agent, a build file;   comparing the build file against an allow list;   determining, in response to the comparison, an agreement between the build system control agent and the base container image control agent; and   performing, by the build system, a build operation including retrieving the new container image for association with the new container image control agent.   
     
     
         15 . A computer system, comprising one or more processors, one or more memories, and one or more computer readable hardware storage devices, said one or more hardware storage devices containing program code executable by the one or more processors via the one or more memories to implement a method for building container images, said method comprising the steps of:
 determining, by one or more processors of a computer system, a first base image control agent associated with a first container image;   invoking, by the one or more processors of the computer system, a first build system control agent, to generate a second container image from the first container image;   facilitating, by the one or more processors of the computer system, a mutual negotiation protocol between the first base image control agent and the first build system control agent;   determining, by the one or more processors of the computer system, a set of operation parameters in response to facilitating the mutual negotiation protocol;   identifying, by the one or more processors of the computer system, from the set of operation parameters a set of requirements for at least one third controller agent;   creating, by the one or more processors of the computer system, a second base image control agent for the second container image using the set of requirements; and   executing, by the one or more processors of the computer system, the second container image controlled by the second base image control agent.   
     
     
         16 . The computer system of  claim 15 , wherein the method further comprises:
 detecting, by the one or more processors of the computer system, an event; and   identifying the build system control agent associated with an originator of the event.   
     
     
         17 . The computer system of  claim 15 , wherein the base container image control agent controls an instantiation of at least one of a reuse, derivation or evolution lifecycle of the base container image with respect to the new container image. 
     
     
         18 . The computer system of  claim 15 , wherein the method further comprises:
 creating, by the base container image control agent, a data encryption key to encrypt one or more layers of the base container image.   
     
     
         19 . The computer system of  claim 15 , wherein the method further comprises:
 forming a smart contract by an owner of the base container image control agent and an owner of the build system control agent to which the base container image control agent and the build system control agent are associated, wherein the smart contract defines negotiation goals, requirements, and constraints for the mutual negotiation protocol.   
     
     
         20 . The computer system of  claim 15 , wherein facilitating the mutual negotiation protocol comprises:
 requesting, by the build system control agent, a build file;   comparing the build file against an allow list;   determining, in response to the comparison, an agreement between the build system control agent and the base container image control agent; and   performing, by the build system, a build operation including retrieving the new container image for association with the new container image control agent.